If you want a container to use multiple cores, then you can't pin it to the same isolated cores. Sure the OS will possibly take some cycles on the cores, but since you're not running any VM, the hit would be minimal. If you really want it to have more or less unhindered access to certain cores, then you pin it to those cores, and then pin every other container to all the cores except for those ones.